This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json) Hash identifier: rxTqO55PLNfTGHHfzYMOLzK0Vs8hXNBM7G/wggjdp6M= Subject key identifier: F0:9E:E1:99:EC:5F:B4:F2:8E:86:D9:5A:D7:A3:9A:40:76:15:07:23 Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Certificate serial: 019B59E427686C060E69AA65FAC85F47DEBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft Manifest number: 14A6 Signing time: Fri 26 Dec 2025 09:01:23 +0000 Manifest this update: Fri 26 Dec 2025 09:01:23 +0000 Manifest next update: Sat 27 Dec 2025 09:01:23 +0000 Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=) 2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=) 3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: xtBWY8HQcU2oBcSYDj7hXmqGFgw5diS8tWQ8uq9DsKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:27:68:6c:06:0e:69:aa:65:fa:c8:5f:47:de:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Validity Not Before: Dec 26 09:01:23 2025 GMT Not After : Dec 27 09:01:23 2025 GMT Subject: CN=f09ee199ec5fb4f28e86d95ad7a39a4076150723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:69:a0:34:c5:a9:68:65:0f:8d:02:57:43: 6f:79:df:25:01:5c:14:7d:23:ef:65:69:5c:5d:44: ef:60:67:9c:99:84:ce:d6:6e:b1:3d:06:51:f1:f3: 27:6a:8d:d2:ce:00:49:58:6b:12:ab:31:03:46:9c: 92:c2:c2:7e:1d:ec:50:80:c9:7e:51:59:2f:26:28: 4b:a6:3f:b2:ed:53:10:8f:a5:cc:f8:52:a1:97:9f: 76:7a:5f:72:f6:e7:e2:84:fd:89:07:a5:7d:3c:5d: f9:86:e9:96:20:b8:82:b9:3a:59:e3:70:e0:37:41: 5b:cf:c1:4d:64:c6:86:7a:93:5e:21:a3:a1:03:01: 21:6f:66:58:2b:d6:dd:bf:ed:ce:b4:52:00:11:5f: ec:34:e5:fe:9d:d6:41:18:a5:2c:fc:ba:bf:8c:9e: 5a:8e:0d:9f:0e:61:6e:ca:37:90:a0:0f:88:b0:ce: de:bd:2a:bc:16:7c:96:7f:0b:e2:fa:52:1b:57:09: b6:04:c7:f6:4d:dc:aa:d7:23:fe:61:20:a5:ef:fa: 18:41:98:92:57:74:bb:84:83:c5:58:ad:95:95:82: 23:ff:d4:30:54:38:bd:75:80:e7:23:88:7a:19:58: c8:16:06:c7:36:6b:94:f6:2b:58:2c:c3:e0:1d:7c: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9E:E1:99:EC:5F:B4:F2:8E:86:D9:5A:D7:A3:9A:40:76:15:07:23 X509v3 Authority Key Identifier: keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:32:6a:1b:64:f9:56:46:8d:e2:a9:2a:e8:be:d8:aa:9b:90: fb:2e:81:8c:90:96:e6:a1:58:3c:15:9b:45:ed:55:d7:1b:95: b5:73:f7:41:2f:ce:24:de:47:8f:cc:90:53:e0:2c:fe:76:f3: fe:58:23:e4:d6:aa:8e:0a:58:75:f7:53:15:67:2c:3c:f0:8b: b1:74:b5:c4:59:04:1b:7e:85:b2:af:0e:b2:24:e1:20:82:ed: d4:4e:8c:97:47:31:a7:69:b5:b9:55:6e:23:3e:2b:80:54:ca: 23:92:8e:64:d6:86:19:b4:e3:1e:c6:44:2a:aa:e2:7d:53:b8: 12:0e:fc:84:07:9f:35:34:1d:23:00:95:13:28:44:98:4a:4d: 2d:de:90:7c:69:b0:9b:f3:8e:91:67:54:5e:f6:25:d7:c7:3c: 11:29:62:80:60:9e:9d:f8:42:fe:56:70:39:f5:e8:95:15:91: 4d:7a:92:0d:fe:32:1e:ac:61:6b:a4:45:6a:7b:5a:61:2e:39: df:9b:71:04:0c:d2:5a:38:0c:a6:69:a6:2f:02:d9:62:2d:60: df:7f:dc:a2:f9:93:dc:6d:87:04:06:53:43:08:96:3e:25:50: 05:be:50:81:5b:f1:88:a9:6e:53:d2:76:f7:c5:ee:12:67:da: f4:5d:f9:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CdobAYOaapl+shfR96/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3 MDBjN2MwHhcNMjUxMjI2MDkwMTIzWhcNMjUxMjI3MDkwMTIzWjAzMTEwLwYDVQQD EyhmMDllZTE5OWVjNWZiNGYyOGU4NmQ5NWFkN2EzOWE0MDc2MTUwNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtpoDTFqWhlD40CV0Nved8lAVwU fSPvZWlcXUTvYGecmYTO1m6xPQZR8fMnao3SzgBJWGsSqzEDRpySwsJ+HexQgMl+ UVkvJihLpj+y7VMQj6XM+FKhl592el9y9ufihP2JB6V9PF35humWILiCuTpZ43Dg N0Fbz8FNZMaGepNeIaOhAwEhb2ZYK9bdv+3OtFIAEV/sNOX+ndZBGKUs/Lq/jJ5a jg2fDmFuyjeQoA+IsM7evSq8FnyWfwvi+lIbVwm2BMf2Tdyq1yP+YSCl7/oYQZiS V3S7hIPFWK2VlYIj/9QwVDi9dYDnI4h6GVjIFgbHNmuU9itYLMPgHXzztQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCe4ZnsX7TyjobZWtejmkB2FQcjMB8GA1UdIwQY MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjJqG2T5 VkaN4qkq6L7YqpuQ+y6BjJCW5qFYPBWbRe1V1xuVtXP3QS/OJN5Hj8yQU+As/nbz /lgj5NaqjgpYdfdTFWcsPPCLsXS1xFkEG36Fsq8OsiThIILt1E6Ml0cxp2m1uVVu Iz4rgFTKI5KOZNaGGbTjHsZEKqrifVO4Eg78hAefNTQdIwCVEyhEmEpNLd6QfGmw m/OOkWdUXvYl18c8ESligGCenfhC/lZwOfXolRWRTXqSDf4yHqxha6RFantaYS45 35txBAzSWjgMpmmmLwLZYi1g33/covmT3G2HBAZTQwiWPiVQBb5QgVvxiKluU9J2 98XuEmfa9F35gQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client